MozillaFirefox/firefox-132.0.1.source.tar.xz.asc
Wolfgang Rosenauer d5ecca7d59 - Mozilla Firefox 132.0.1
* Fixed issues causing intermittent video playback problems on
    some sites. (bmo#1928484, bmo#1928798)
- remove KDE integration patches
  - mozilla-kde.patch
  - firefox-kde.patch
  on KDE use these settings instead
  widget.use-xdg-desktop-portal.file-picker=1
  widget.use-xdg-desktop-portal.mime-handler=1
  (those are set by the latest branding package as well)

- Mozilla Firefox 132.0
  https://www.mozilla.org/en-US/firefox/132.0/releasenotes
  MFSA 2024-55 (bsc#1231879)
  * CVE-2024-10458 (bmo#1921733)
    Permission leak via embed or object elements
  * CVE-2024-10459 (bmo#1919087)
    Use-after-free in layout with accessibility
  * CVE-2024-10460 (bmo#1912537)
    Confusing display of origin for external protocol handler prompt
  * CVE-2024-10461 (bmo#1914521)
    XSS due to Content-Disposition being ignored in
    multipart/x-mixed-replace response
  * CVE-2024-10462 (bmo#1920423)
    Origin of permission prompt could be spoofed by long URL
  * CVE-2024-10463 (bmo#1920800)
    Cross origin video frame leak
  * CVE-2024-10468 (bmo#1914982)
    Race conditions in IndexedDB
  * CVE-2024-10464 (bmo#1913000)

OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaFirefox?expand=0&rev=1184
2024-11-05 10:48:26 +00:00

17 lines
833 B
Plaintext

-----BEGIN PGP SIGNATURE-----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=oM9y
-----END PGP SIGNATURE-----